« List of all CVEs

CVE-2023-5868

Postgresql: memory disclosure in aggregate function calls

Published: 12/10/2023 Last updated: 6/23/2026 Reserved: 10/31/2023

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes, potentially revealing notable and confidential information. This issue exists due to excessive data output in aggregate function calls, enabling remote users to read some portion of system memory.

CNA assigner: redhat (53f830b8-0a3f-465b-8143-3b8a9948e749) Requested by: n/a

Metrics

Version Score Severity Vector String
3.1 4.3 Medium CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Opam packages affected (5)

conf-mingw-w64-postgresql-i686 conf-mingw-w64-postgresql-x86_64 conf-postgresql ocsigen-start postgresql

Products affected (89)

Product Vendor Version
RHACS-3.74-RHEL-8 Red Hat 1.15.1
RHACS-4.1-RHEL-8 Red Hat <= 1.2.1
RHACS-3.74-RHEL-8 Red Hat 3.2.0JA
Red Hat Advanced Cluster Security 4.2 Red Hat 1.13.6
Red Hat Advanced Cluster Security 4.2 Red Hat 3.0.0.0 2020.11.20.0
RHACS-4.1-RHEL-8 Red Hat 1.15.2
Red Hat Advanced Cluster Security 4.2 Red Hat 7 for 32-bit Systems Service Pack 1
RHACS-3.74-RHEL-8 Red Hat 16.8.1s
RHACS-4.1-RHEL-8 Red Hat < 15
RHACS-4.1-RHEL-8 Red Hat 1.15.1
RHACS-3.74-RHEL-8 Red Hat 1.15.2
Red Hat Advanced Cluster Security 4.2 Red Hat 1.13.6
Red Hat Advanced Cluster Security 4.2 Red Hat 1.13.6
RHACS-4.1-RHEL-8 Red Hat 1.15.3
RHACS-3.74-RHEL-8 Red Hat 1.15.2
RHACS-4.1-RHEL-8 Red Hat n/a
RHACS-3.74-RHEL-8 Red Hat 2.2.5.3
Red Hat Advanced Cluster Security 4.2 Red Hat 2008 for Itanium-Based Systems Service Pack 2
RHACS-4.1-RHEL-8 Red Hat n/a
RHACS-3.74-RHEL-8 Red Hat >= 4.7.0, < 4.7.18
Red Hat Advanced Cluster Security 4.2 Red Hat 1.14.1
Red Hat Advanced Cluster Security 4.2 Red Hat unspecified
RHACS-3.74-RHEL-8 Red Hat 1.15.1
RHACS-3.74-RHEL-8 Red Hat 1.15.1
Red Hat Advanced Cluster Security 4.2 Red Hat 18.2R3, 18.2R3-S1, 18.2R3-S2
RHACS-3.74-RHEL-8 Red Hat n/a
RHACS-4.1-RHEL-8 Red Hat n/a
Red Hat Advanced Cluster Security 4.2 Red Hat 1.14.1
RHACS-4.1-RHEL-8 Red Hat Photoshop CC 2019, and Photoshop 2020 versions
Red Hat Enterprise Linux 9 Red Hat 19c
Red Hat Enterprise Linux 9 Red Hat 1.15.4
Red Hat Enterprise Linux 9.0 Extended Update Support Red Hat 1.15.3
Red Hat Enterprise Linux 9.2 Extended Update Support Red Hat 1.15.3
Red Hat Enterprise Linux 6 Red Hat < 2.14.2
Red Hat Enterprise Linux 7 Red Hat 10.1.0
Red Hat Enterprise Linux 9.0 Extended Update Support Red Hat 4.3
Red Hat Enterprise Linux 9.2 Extended Update Support Red Hat < 7.11
Red Hat Enterprise Linux 6 Red Hat 10 Version 1803 for ARM64-based Systems
Red Hat Enterprise Linux 7 Red Hat 10 Version 1809 for 32-bit Systems
Red Hat Enterprise Linux 8 Red Hat 10 Version 1809 for ARM64-based Systems
Red Hat Enterprise Linux 8 Red Hat 3.1.0
Red Hat Enterprise Linux 8 Red Hat 1.14.1
Red Hat Enterprise Linux 8.6 Extended Update Support Red Hat < https://aka.ms/OfficeSecurityReleases
Red Hat Enterprise Linux 8.2 Advanced Update Support Red Hat 1.15.1
Red Hat Enterprise Linux 8.8 Extended Update Support Red Hat FortiWeb 6.4.1, 6.4.0, 6.3.0 through 6.3.15
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Red Hat 1.13.7
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions Red Hat 1.15.0
Red Hat Enterprise Linux 8.4 Telecommunications Update Service Red Hat 1.15.0
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions Red Hat unspecified
Red Hat Enterprise Linux 8 Red Hat < publication
Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions Red Hat 1.13.4
Red Hat Enterprise Linux 8.2 Advanced Update Support Red Hat < publication
Red Hat Enterprise Linux 8.2 Telecommunications Update Service Red Hat < watchOS 5.2.1
Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions Red Hat 12.2.1.4.0
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Red Hat 10 Version 1809 for ARM64-based Systems
Red Hat Enterprise Linux 8.8 Extended Update Support Red Hat 1.15.4
Red Hat Enterprise Linux 8.4 Telecommunications Update Service Red Hat 2008 for Itanium-Based Systems Service Pack 2
Red Hat Enterprise Linux 8.2 Telecommunications Update Service Red Hat 1.15.1
Red Hat Enterprise Linux 8.6 Extended Update Support Red Hat 1.14.3
Red Hat Enterprise Linux 8 Red Hat 1.14.1
Red Hat Enterprise Linux 8.8 Extended Update Support Red Hat 1.15.2
Red Hat Enterprise Linux 8.6 Extended Update Support Red Hat 1.14.1
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions Red Hat 1.14.1
Red Hat Enterprise Linux 8 Red Hat < 19.3*
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Red Hat 10 Version 1607 for 32-bit Systems
Red Hat Enterprise Linux 8.4 Telecommunications Update Service Red Hat 2012
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions Red Hat unspecified
Red Hat Enterprise Linux 8.6 Extended Update Support Red Hat n/a
Red Hat Enterprise Linux 8.8 Extended Update Support Red Hat < publication
Red Hat Enterprise Linux 8.4 Telecommunications Update Service Red Hat 1.15.0
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Red Hat 1.15.2
Red Hat Enterprise Linux 9.2 Extended Update Support Red Hat < 7.50
Red Hat Enterprise Linux 8.8 Extended Update Support Red Hat 1.14.2
Red Hat Enterprise Linux 9 Red Hat < 1.2.2
Red Hat Enterprise Linux 8.8 Extended Update Support Red Hat n/a
Red Hat Enterprise Linux 8 Red Hat < publication
Red Hat Enterprise Linux 8 Red Hat 1.14.1
Red Hat Enterprise Linux 9.2 Extended Update Support Red Hat 1.15.4
Red Hat Enterprise Linux 9 Red Hat 1.15.4
Red Hat Enterprise Linux 9 Red Hat n/a
Red Hat Enterprise Linux 9 Red Hat 10 for x64-based Systems
Red Hat Enterprise Linux 8 Red Hat 2.0
Red Hat Enterprise Linux 8 Red Hat 10 Version 1709 for ARM64-based Systems
Red Hat Software Collections Red Hat n/a
Red Hat Software Collections Red Hat 10 Version 1607 for 32-bit Systems
Red Hat Software Collections for Red Hat Enterprise Linux 7 Red Hat 1.15.4
Red Hat Software Collections for Red Hat Enterprise Linux 7 Red Hat < 7.53
Red Hat Software Collections for Red Hat Enterprise Linux 7 Red Hat 1.15.2
Red Hat Software Collections for Red Hat Enterprise Linux 7 Red Hat 8.5

References (104)

Credits (2)